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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings of claims in the application: 
Listing of Claims: 

1 1 . (Previously presented) In a management system including a management 

2 computer and one or more managed computers to be managed by the management computer, the 

3 management computer comprising: 

4 a communication device configured to receive operating data of a monitoring 

5 object inside a managed computer and information relating to an event; 

6 a memory to store the operating data received by the communication device; 

7 a storage device; and 

8 a processor configured to identify from the operating data received a portion of 

9 the operating data which relates to the event, 

10 wherein when the event indicates an occurrence of trouble or a degradation in 

1 1 performance of the monitoring object, then the operating data received is stored in the storage 

12 device, 

13 wherein when the event does not indicate an occurrence of trouble or a 

14 degradation in performance of the monitoring object, then the operating data received is not 

15 stored in the storage device. 

1 2. (Original) The management computer as set forth in claim 1, 

2 wherein the information relating to the event includes at least one of information 

3 showing presence or absence of occurrence of the event, information showing an occurrence 

4 time of the event, and information showing a classification of the event, and 

5 wherein the processor of the management computer is configured to identify the 

6 portion of the operating data which relates to the event, based on the operating data and the 

7 information relating to the event including at least one of the information showing presence or 
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8 absence of occurrence of the event, the information showing the occurrence time of the event, 

9 and the information showing the classification of the event. 

1 3 . (Original) The management computer as set forth in claim 1 , wherein the 

2 management computer is configured to manage a plurality of managed computers, wherein the 

3 communication device is configured to receive operating data of monitoring objects inside the 

4 plurality of managed computers and information relating to an event, wherein the information 

5 relating to an event includes host information identifying from the operating data received by the 

6 communication device a portion of the operating data which is received from the managed 

7 computer in which the event occurred, and wherein the processor of the management computer is 

8 configured to identify the portion of the operating data which relates to the event, based on the 

9 operating data and the information relating to the event including the host information. 

1 4. (Original) The management computer as set forth in claim 3, wherein the 

2 information relating to the event includes information showing presence or absence of 

3 occurrence of the event, and wherein the processor of the management computer is configured to 

4 identify the portion of the operating data which relates to the event, based on the operating data 

5 and the information showing presence or absence of occurrence of the event. 

1 5. (Original) The management computer as set forth in claim 1, wherein the 

2 monitoring object includes at least one of a hardware structure part in a storage device connected 

3 to the management computer through a network and a program stored in the storage device in the 

4 managed computer. 

1 6. (Original) The management computer as set forth in claim 1 wherein the 

2 portion of the operating data identified by the process is to be used for trouble analysis and to 

3 carry out the trouble analysis. 
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1 7. (Previously presented) A management system comprising a management 

2 computer and a managed computer which is managed by the management computer, 

3 wherein the managed computer includes: 

4 a managed computer processor which is configured to obtain operating 

5 data from a monitoring object and to generate information relating to an event, the event 

6 including information indicating trouble occurrence or performance decrement of the monitoring 

7 object when there is an occurrence of trouble or a decrement of performance with the monitoring 

8 object; and 

9 a managed computer communication device which is configured to 

10 transmit the operating data from the monitoring object and the information relating to the event 

1 1 to the management computer, and 

12 wherein the management computer includes: 

13 a management computer communication device which is configured to 

14 receive from the managed computer communication device the operating data and the 

15 information relating to the event; 

16 an operating data buffer to store the operating data received by the 

17 management computer communication device; 

18 a data storage; and 

1 9 a management computer processor which is configured to identify from 

20 the operating data received a portion of the operating data relating to the event, 

21 wherein when the event indicates trouble occurrence or performance 

22 decrement, then the operating data received is stored in the data storage, 

23 wherein when the event does not indicate trouble occurrence or 

24 performance decrement, then the operating data received is not stored in the data storage. 

8. (Canceled) 
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1 9. (Previously presented) The management system as set forth in claim 7, 

2 wherein the management computer processor is configured, when the information 

3 relating to the event is received, to store the information relating to event in the operating data 

4 buffer in association with the operating data stored in the operating data buffer, to write a part of 

5 the operating data stored and the information relating to the event from the operating data buffer 

6 to the data storage, the part of the operating data stored to be written to the data storage relating 

7 to the event, based on the part of the operating data stored and the information relating to the 

8 event written to the data storage. 

1 10. (Previously presented) The management system as set forth in claim 7, 

2 wherein the management computer processor is configured, when the information 

3 relating to the event is received, to store the information relating to event in the operating data 

4 buffer in association with the operating data stored in the operating data buffer, to determine a 

5 part of the operating data to be written from the operating data buffer to the data storage based on 

6 the information relating to the event, and to write the part of the operating data stored from the 

7 operating data buffer to the data storage, and to carry out the trouble analysis based on the part of 

8 the operating data stored written to the data storage. 



1 11. (Withdrawn) A management system comprising a management computer 

2 and a managed computer which is subjected to trouble monitoring by the management computer, 

3 wherein the managed computer includes: 

4 a managed computer processor which is configured to obtain operating 

5 data from a monitoring object and to generate information relating to an event, the event 

6 including information indicating trouble occurrence or performance decrement of the monitoring 

7 object when there is an occurrence of trouble or a decrement of performance with the monitoring 

8 object; and 

9 a managed computer communication device which is configured to 

10 identify the operating data relating to the event and to transmit the operating data identified to the 
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1 1 management computer, based on the operating data identified and the information relating to the 

12 event, 

1 3 wherein when the event indicates trouble occurrence or performance 

14 decrement, then the operating data identified is transmitted to the management computer, 

15 wherein when the event does not indicate trouble occurrence or 

16 performance decrement, then the operating data identified is not transmitted to the 

17 management computer; and 

18 wherein the management computer includes: 

19 a management computer communication device which is configured to 

20 receive the operating data identified from the managed computer communication device; and 

21 a management computer communication processor which is configured to 

22 carry out the trouble analysis based on the operating data received. 

1 12. (Previously presented) A management computer for monitoring a 

2 monitoring object, the management computer comprising: 

3 a communication device configured to receive operating data of a monitoring 

4 object and information relating to an event; 

5 an operating data buffer to store the operating data received by the 

6 communication device; 

7 a data storage; and 

8 a processor configured to identify from the operating data received a portion of 

9 the operating data which relates to the event, 

10 wherein when the event indicates an occurrence of trouble or a degradation in 

1 1 performance of the monitoring object, then the operating data received is stored in the data 

12 storage, 

13 wherein when the event does not indicate an occurrence of trouble or a 

14 degradation in performance of the monitoring object, then the operating data received is not 

1 5 stored in the data storage . 
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1 13. (Previously presented) The management computer as set forth in claim 12, 

2 wherein the processor is configured, when the information relating to the event is 

3 received, to store the information relating to event in the operating data buffer in association with 

4 the operating data stored in the operating data buffer, to write the operating data stored and the 

5 information relating to the event from the operating data buffer to the data storage, and to 

6 identify from the operating data a portion of the operating data relating to the event, based on the 

7 operating data stored and the information relating to the event written to the data storage. 



1 14. (Withdrawn) In a management system including a management computer 

2 and a managed computer to be managed by the management computer, the managed computer 

3 comprising: 

4 a processor configured to obtain operating data from a monitoring object and to 

5 generate information relating to an event, the event including information indicating trouble 

6 occurrence or performance decrement of the monitoring object when there is an occurrence of 

7 trouble or a decrement of performance with the monitoring object; and 

8 a communication device configured to identify from the operating data obtained 

9 from the monitoring object a portion of the operating data which relates to the event, 

10 wherein when the event indicates trouble occurrence or performance decrement, 

1 1 then the operating data obtained is transmitted to the management computer, 

12 wherein when the event does not indicate trouble occurrence or performance 

13 decrement, then the operating data obtained is not transmitted to the management computer. 

1 15. (Previously presented) An operating management method for managing 

2 one or more monitoring objects on the basis of operating data, the operating management method 

3 comprising: 

4 receiving the operating data of the monitoring object and information relating to 

5 an event; 

6 storing the operating data in a memory; 
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7 identifying from the operating data a portion of the operating data which relates to 

8 the event; 

9 storing the operating data in a storage device when the event indicates an 

10 occurrence of trouble or a degradation in performance of the monitoring object, wherein the 

1 1 operating data is not stored in the storage device otherwise; and 

12 displaying the operating data identified. 

1 16. (Original) The operating management method as set for in claim 15, 

2 wherein the information relating to the event includes at least one of information 

3 showing presence or absence of occurrence of the event, information showing an occurrence 

4 time of the event, and information showing a classification of the event, and 

5 wherein the identifying comprises identifying the portion of the operating data 

6 which relates to the event, based on the operating data and the information relating to the event 

7 including at least one of the information showing presence or absence of occurrence of the event, 

8 the information showing the occurrence time of the event, and the information showing the 

9 classification of the event. 

1 17. (Previously presented) The operating management method as set for in 



2 claim 15, wherein the receiving comprises receiving the operating data of a plurality of 

3 monitoring objects, wherein the information relating to the event includes host information 

4 identifying from the operating data a portion of the operating data which is received from the 

5 monitoring object in which the event occurred, and wherein the identifying comprises identifying 

6 the portion of the operating data which relates to the event, based on the operating data and the 

7 information relating to the event including the host information. 



1 18. (Original) The operating management method as set for in claim 17, 

2 wherein the information relating to the event includes information showing presence or absence 

3 of occurrence of the event, and wherein the identifying comprises identifying the portion of the 

4 operating data which relates to the event, based on the operating data and the information 

5 showing presence or absence of occurrence of the event. 
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19. (Canceled) 

1 20. (Previously presented) In a computer readable medium storing a program 

2 for managing a monitoring object on the basis of operating data, the program comprising: 

3 code for receiving the operating data; 

4 code for storing the operating data in a memory; 

5 code for identifying from the operating data a portion of the operating data which 

6 relates to the event; 

7 code for storing the operating data in a storage device when the event indicates an 

8 occurrence of trouble or a degradation in performance of the monitoring object, wherein the 

9 operating data is not stored in the storage device otherwise; and 
10 code for displaying the operating data identified. 
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